Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-6422-1
HistoryOct 09, 2023 - 12:00 a.m.

Ring vulnerabilities

2023-10-0900:00:00
ubuntu.com
25

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.018 Low

EPSS

Percentile

87.9%

JSON

Releases

  • Ubuntu 23.04
  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM

Packages

  • ring - Secure and distributed voice, video and chat platform

Details

It was discovered that Ring incorrectly handled certain inputs. If a user or
an automated system were tricked into opening a specially crafted input file,
a remote attacker could possibly use this issue to execute arbitrary code.
(CVE-2021-37706)

It was discovered that Ring incorrectly handled certain inputs. If a user or
an automated system were tricked into opening a specially crafted input file,
a remote attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
(CVE-2021-43299, CVE-2021-43300, CVE-2021-43301, CVE-2021-43302,
CVE-2021-43303, CVE-2021-43804, CVE-2021-43845, CVE-2022-21723,
CVE-2022-23537, CVE-2022-23547, CVE-2022-23608, CVE-2022-24754,
CVE-2022-24763, CVE-2022-24764, CVE-2022-24793, CVE-2022-31031,
CVE-2022-39244)

It was discovered that Ring incorrectly handled certain inputs. If a user or
an automated system were tricked into opening a specially crafted input file,
a remote attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 20.04 LTS. (CVE-2022-21722)

It was discovered that Ring incorrectly handled certain inputs. If a user or
an automated system were tricked into opening a specially crafted input file,
a remote attacker could possibly use this issue to cause a denial of service.
(CVE-2023-27585)

OSVersionArchitecturePackageVersionFilename
Ubuntu23.04noarchjami< 20230206.0~ds1-5ubuntu0.1UNKNOWN
Ubuntu23.04noarchjami-daemon< 20230206.0~ds1-5ubuntu0.1UNKNOWN
Ubuntu23.04noarchjami-daemon-dbgsym< 20230206.0~ds1-5ubuntu0.1UNKNOWN
Ubuntu23.04noarchjami-dbgsym< 20230206.0~ds1-5ubuntu0.1UNKNOWN
Ubuntu20.04noarchjami< 20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1UNKNOWN
Ubuntu20.04noarchjami-daemon< 20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1UNKNOWN
Ubuntu20.04noarchjami-daemon-dbgsym< 20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1UNKNOWN
Ubuntu20.04noarchjami-dbgsym< 20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1UNKNOWN
Ubuntu20.04noarchring< 20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1UNKNOWN
Ubuntu20.04noarchring-daemon< 20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1UNKNOWN
Rows per page:
1-10 of 161

Related

nessus 13
osv 31
openvas 12
debian 10
ubuntu 1
redos 3
thn 1
gentoo 1
freebsd 1
alpinelinux 19
prion 20
ubuntucve 20
debiancve 20
cve 20
fortinet 1
cnvd 5
veracode 20
redhatcve 1
nessus
nessus
Ubuntu 18.04 ESM / 20.04 LTS / 23.04 : Ring vulnerabilities (USN-6422-1)
2023-10-09 00:00:00
Debian DLA-3549-1 : ring - LTS security update
2023-08-30 00:00:00
Debian DLA-2962-1 : pjproject - LTS security update
2022-03-30 00:00:00
osv
osv
ring - security update
2023-08-29 00:00:00
ring vulnerabilities
2023-10-24 08:51:49
ring vulnerabilities
2023-10-09 15:09:52
openvas
openvas
Ubuntu: Security Advisory (USN-6422-1)
2023-10-10 00:00:00
Debian: Security Advisory (DLA-3549-1)
2023-08-31 00:00:00
Ubuntu: Security Advisory (USN-6422-2)
2023-10-25 00:00:00
debian
debian
[SECURITY] [DLA 3549-1] ring security update
2023-08-29 21:15:19
[SECURITY] [DLA 2962-1] pjproject security update
2022-03-28 14:23:21
[SECURITY] [DLA 3194-1] asterisk security update
2022-11-17 11:35:25
ubuntu
ubuntu
Ring vulnerabilities
2023-10-24 00:00:00
redos
redos
ROS-20220310-01
2022-03-10 00:00:00
ROS-20220518-03
2022-05-18 00:00:00
ROS-20221227-02
2022-12-27 00:00:00
thn
thn
Critical Bugs Reported in Popular Open Source PJSIP SIP and Media Stack
2022-03-02 07:10:00
gentoo
gentoo
PJSIP: Multiple Vulnerabilities
2022-10-31 00:00:00
freebsd
freebsd
asterisk -- multiple vulnerabilities
2022-03-03 00:00:00
alpinelinux
alpinelinux
CVE-2022-24793
2022-04-06 14:15:00
CVE-2023-27585
2023-03-14 17:15:19
CVE-2021-43303
2022-02-16 21:15:00
prion
prion
Buffer overflow
2023-03-14 17:15:00
Buffer overflow
2022-04-06 14:15:00
Buffer overflow
2022-02-16 21:15:00
ubuntucve
ubuntucve
CVE-2022-24793
2022-04-06 00:00:00
CVE-2023-27585
2023-03-14 00:00:00
CVE-2021-43301
2022-02-16 00:00:00
debiancve
debiancve
CVE-2023-27585
2023-03-14 17:15:19
CVE-2022-24793
2022-04-06 14:15:00
CVE-2021-43303
2022-02-16 21:15:00
cve
cve
CVE-2022-24793
2022-04-06 14:15:00
CVE-2023-27585
2023-03-14 17:15:19
CVE-2021-43300
2022-02-16 21:15:00
fortinet
fortinet
Multiple vulnerabilities in PJSIP library
2022-05-03 00:00:00
cnvd
cnvd
PJSUA API Buffer Overflow Vulnerability (CNVD-2022-15000)
2022-02-18 00:00:00
PJSUA API Buffer Overflow Vulnerability (CNVD-2022-14997)
2022-02-18 00:00:00
PJSUA API Buffer Overflow Vulnerability (CNVD-2022-14998)
2022-02-18 00:00:00
veracode
veracode
Buffer Overflow
2022-10-12 13:44:02
Use After Free
2022-02-23 08:07:53
Buffer Overflow
2022-05-14 20:20:43
redhatcve
redhatcve
CVE-2022-21723
2022-05-20 23:43:44

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.018 Low

EPSS

Percentile

87.9%

JSON
Related for USN-6422-1
nessus13osv31openvas12debian10ubuntu1redos3thn1gentoo1freebsd1alpinelinux19prion20ubuntucve20debiancve20cve20fortinet1cnvd5veracode20redhatcve1